diff --git a/change-notes/2021-02-09-html-templates.md b/change-notes/2021-02-09-html-templates.md index 02446038162..d742ea4630e 100644 --- a/change-notes/2021-02-09-html-templates.md +++ b/change-notes/2021-02-09-html-templates.md @@ -1,3 +1,2 @@ lgtm,codescanning -* Improved our modelling of Go's builtin `html/template` package to understand that these templates provide context-sensitive escaping of HTML and Javascript special characters. This may reduce false-positive seen by the `go/reflected-xss` query, as well as other queries for which HTML escaping is relevant. - +* Improved our modeling of Go's builtin `html/template` package to understand that these templates provide context-sensitive escaping of HTML and Javascript special characters. This may reduce false-positives seen by the `go/reflected-xss` query, as well as other queries for which HTML escaping is relevant.